search

aeris / cryptcheck

Verify some SSL/TLS website or XMPP implementation
GNU Affero General Public License v3.0
185 stars 20 forks source link

undefined method 'ecda?' for nil:NilClass #55

Closed gorinje closed 3 years ago

gorinje commented 3 years ago

Hi,

On some websites, I get this message : undefined method 'ecda?' for nil:NilClass

For example, cryptcheck https 20minutes.fr

I'm using the latest version of the master that runs on Ubuntu 21.04 with ruby 2.7.2p13.

Should I downgrade the ruby version?

Many thanks

aeris commented 3 years ago

Hello!

As mentioned in the README, CryptCheck relies on very old, deprecated and unsecured custom patched versions for Ruby (2.2/2.3) and OpenSSL (1.0.2j) to support low level TLS access and old cipher suite needed for scoring.

It's not possible to use 2.4+ ruby, and not recommended to use CryptCheck outside a throwable virtual machine. Installation process is quite complicated and use many tricks clearly not compatible with production or daily used machine :sweat_smile:

I advice you to use instead pre-built docker image embedding all this process: docker run --rm aeris22/cryptcheck https It's also compatible with batch scripting with a JSON output : docker run --rm aeris22/cryptcheck https 20minutes.fr -jq

gorinje commented 3 years ago

That's perfect, many thanks!